CVE-2006-6897

Description

Directory traversal vulnerability in Widcomm Bluetooth for Windows (BTW) 3.0.1.905 allows remote attackers to conduct unauthorized file operations via a .. (dot dot) in an unspecified parameter.

Affected products

• widcomm / bluetooth_for_windows3.0.1.905 – 3.0.1.905

References

• MISChttp://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf
• MISChttp://www.securityfocus.com/archive/1/455889/100/0/threaded
• MISChttp://osvdb.org/37590